Техническая информация
Изменения в файловой системе
Создает следующие файлы
- %TEMP%\001336c3.log
- %TEMP%\inh125920324729\images\sponsored.png
- %TEMP%\inh125920324729\images\resume_button.png
- %TEMP%\inh125920324729\images\quick_specs.png
- %TEMP%\inh125920324729\images\progressbar.png
- %TEMP%\inh125920324729\images\progress.png
- %TEMP%\inh125920324729\images\pause_button.png
- %TEMP%\inh125920324729\images\bg_offer.jpg
- %TEMP%\inh125920324729\images\loader.gif
- %TEMP%\inh125920324729\images\grey_button_hover.png
- %TEMP%\inh125920324729\images\grey_button.png
- %TEMP%\inh125920324729\images\color_button_hover.png
- %TEMP%\inh125920324729\images\color_button.png
- %TEMP%\inh125920324729\images\close_hover.png
- %TEMP%\inh125920324729\images\close.png
- %TEMP%\inh125920324729\images\icon_generic.png
- %TEMP%\inh125920324729\images\bg_progress.jpg
- %TEMP%\inh125920324729\libs\localassests\icc\icc_v5_8.cis
- %TEMP%\in310f~1\4b6d2b~1.tmp
- %TEMP%\in310f2bc7\4b6d2b75_stp\icut.dat
- %TEMP%\00137d22.log
- %TEMP%\in310f2bc7\2ddc1b32_stp\wp24.html
- %TEMP%\in310f2bc7\2ddc1b32_stp\we23.html
- %TEMP%\in310f~1\4b6d2b~1.par
- %TEMP%\in310f~1\5ef8b3~1.tmp
- %TEMP%\inh125920324729\locale\en.locale
- %TEMP%\inh125920324729\libs\localassests\icut\icut_v2_2.cis
- %TEMP%\in310f~1\2ddc1b~1.tmp
- %TEMP%\in310f~1\2ddc1b~1.par
- %ProgramFiles(x86)%\00134549.log
- %TEMP%\inh125920324729\bootstrap_6734.html
- %TEMP%\00133a9b.log
- %TEMP%\00133a8b.log
- %TEMP%\in310f~1\5ef8b3~1.par
- %TEMP%\inh125920324729\images\bg.png
- %TEMP%\inh125920324729\images\bg.jpg
- %TEMP%\inh125920324729\css\sdk-ui\images\progress-bg2.png
- %TEMP%\inh125920324729\css\helpers\_border-radius.scss
- %TEMP%\inh125920324729\css\helpers\_backgrounds.scss
- %TEMP%\inh125920324729\css\helpers\_align.scss
- %TEMP%\inh125920324729\css\_variables.scss
- %TEMP%\inh125920324729\css\_helpers.scss
- %TEMP%\inh125920324729\css\helpers\_clearfix.scss
- %TEMP%\inh125920324729\css\_functions.scss
- %TEMP%\inh125920324729\css\main.scss
- %TEMP%\inh125920324729\css\main.css
- %TEMP%\inh125920324729\css\ie6_main.scss
- %TEMP%\inh125920324729\css\ie6_main.css
- %TEMP%\inh125920324729\form.bmp.mask
- %TEMP%\inh125920324729\csshover3.htc
- %TEMP%\inh125920324729\css\swagent.css
- %TEMP%\inh125920324729\css\helpers\_colors.scss
- %TEMP%\inh125920324729\css\helpers\_border.scss
- %TEMP%\inh125920324729\css\helpers\_display.scss
- %TEMP%\inh125920324729\css\sdk-ui\images\progress-bg.png
- %TEMP%\inh125920324729\css\helpers\_z-index.scss
- %TEMP%\inh125920324729\css\sdk-ui\images\progress-bg-corner.png
- %TEMP%\inh125920324729\css\sdk-ui\images\button-bg.png
- %TEMP%\inh125920324729\css\sdk-ui\_progress-bar.scss
- %TEMP%\inh125920324729\css\sdk-ui\_checkbox.scss
- %TEMP%\inh125920324729\css\sdk-ui\_button.scss
- %TEMP%\inh125920324729\css\sdk-ui\_browse.scss
- %TEMP%\inh125920324729\css\helpers\_width-height.scss
- %TEMP%\inh125920324729\css\helpers\_float.scss
- %TEMP%\inh125920324729\css\helpers\_visibility.scss
- %TEMP%\inh125920324729\css\helpers\_typography.scss
- %TEMP%\inh125920324729\css\helpers\_positions.scss
- %TEMP%\inh125920324729\css\helpers\_padding.scss
- %TEMP%\inh125920324729\css\helpers\_margin.scss
- %TEMP%\inh125920324729\css\helpers\_lists.scss
- %TEMP%\in310f2bc7\5ef8b343_stp\osutils.vbs
- %TEMP%\in310f2bc7\5ef8b343_stp\run.vbs
Удаляет следующие файлы
- %TEMP%\001336c3.log
- %TEMP%\00133a8b.log
- %TEMP%\00133a9b.log
- %ProgramFiles(x86)%\00134549.log
- %TEMP%\inh125920324729\bootstrap_6734.html
- %TEMP%\00137d22.log
Перемещает следующие файлы
- %TEMP%\in310f2bc7\2ddc1b32_stp\we23.html в %TEMP%\bf_yl\we23.html
- %TEMP%\in310f2bc7\2ddc1b32_stp\wp24.html в %TEMP%\bf_yl\wp24.html
Сетевая активность
TCP
Запросы HTTP GET
- http://se####.taloccsegip.com/img/Jimomoromoj/Jimomoromoj_logo.png
- http://se####.taloccsegip.com/img/Nuhududanew/win_TL1_bg.png
- http://se####.taloccsegip.com/img/Nuhududanew/img_TL1_bg.png
- http://se####.taloccsegip.com/img/Nuhududanew/logo_new.png
- http://se####.taloccsegip.com/img/Nuhududanew/BG_TT.png
- http://se####.taloccsegip.com/img/Nuhududanew/BG_TT_IMG.png
- http://se####.taloccsegip.com/img/Nuhududanew/BG_TC_IMG_N.png
- http://se####.taloccsegip.com/img/Nuhududanew/BG_LONG.png
- http://se####.taloccsegip.com/img/Nuhududanew/BG_IMG_LONG.png
- http://se####.taloccsegip.com/img/Nuhududanew/BG_IMG.jpg
- http://se####.taloccsegip.com/img/Nuhududanew/BG.jpg
- http://se####.taloccsegip.com/ofr/Solululadul/icut_v2_2
- http://ap#.##loccsegip.com/ofr/Niniwic/YL/Niniwic_Tefenece_12Apr16
- http://se####.taloccsegip.com/ofr/Solululadul/osutils
- http://se####.taloccsegip.com/img/Savatata/EN.png
- http://se####.taloccsegip.com/img/Sibarasawi/logo_comp.png
- http://se####.taloccsegip.com/img/Sibarasawi/bg_comp.png
- http://se####.taloccsegip.com/img/Tefenece/Tefenece_logo_black.png
- http://se####.taloccsegip.com/img/Nuhududanew/logo.png
- http://se####.taloccsegip.com/img/Nuhududanew/BG_TC_N.png
Запросы HTTP POST
- http://ww##.##loccsegip.com/
- http://de#.##loccsegip.com/
UDP
- DNS ASK de#.##loccsegip.com
- DNS ASK ww##.##loccsegip.com
- DNS ASK se####.taloccsegip.com
- DNS ASK ap#.##loccsegip.com
Другое
Ищет следующие окна
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
